dy bd-ticket-guard-client-data bd-ticket-guard-ree-public-key 逆向

声明

本文章中所有内容仅供学习交流使用，不用于其他任何目的，抓包内容、敏感网址、数据接口等均已做脱敏处理，严禁用于商业用途和非法用途，否则由

此产生的一切后果均与作者无关！

部分python代码

cp1 = execjs.compile(open('bd-ticket-guard-client-data.js','r',encoding='utf-8').read())
session_dtrait = cp1.call('x_tt_session_dtrait','POST',req_url, urllib.parse.urlencode(data))
result = cp1.call('getClientData')
client_data = result['bd-ticket-guard-client-data']
public_key = result['bd-ticket-guard-ree-public-key']
print(client_data)
print(public_key)
headers = {
    "bd-ticket-guard-client-data": client_data,
    "bd-ticket-guard-ree-public-key": public_key,
    "bd-ticket-guard-version": "2",
    "bd-ticket-guard-web-sign-type": "1",
    "bd-ticket-guard-web-version": "2",
    "uifid": uifid,
    "x-tt-session-dtrait": session_dtrait
}
response = session.post(url, headers=headers, cookies=cookies, params=p, data=data)

print(response.text)
print(response)

cp1 = execjs.compile(open('bd-ticket-guard-client-data.js','r',encoding='utf-8').read())
session_dtrait = cp1.call('x_tt_session_dtrait','POST',req_url, urllib.parse.urlencode(data))
result = cp1.call('getClientData')
client_data = result['bd-ticket-guard-client-data']
public_key = result['bd-ticket-guard-ree-public-key']
print(client_data)
print(public_key)
headers = {
    "bd-ticket-guard-client-data": client_data,
    "bd-ticket-guard-ree-public-key": public_key,
    "bd-ticket-guard-version": "2",
    "bd-ticket-guard-web-sign-type": "1",
    "bd-ticket-guard-web-version": "2",
    "uifid": uifid,
    "x-tt-session-dtrait": session_dtrait
}
response = session.post(url, headers=headers, cookies=cookies, params=p, data=data)

print(response.text)
print(response)

结果

总结

1.出于安全考虑,本章未提供完整流程,调试环节省略较多,只提供大致思路,具体细节要你自己还原,相信你也能调试出来。